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Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
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DETAILED ACTION 



Response to Amendment 



Claims 1-40 are pending in this application have been examined. 



Response to Arguments 



2. The applicant argues in traverse of the rejection of claim 1 that Stefik does not 
teach access to "paged subsets" of data "a page at a time." The Examiner counters by 
first noting that such a limitation is not found in claim 1. The Examiner secondly offers 
col. 12 lines 1-39 of the Stefik "980 Patent where this is taught. The "child d blocks" of 
Stefik constitute paged subsets of data, accessible a page at a time as is standard for 
magazine articles and other electronic print media. The Applicant's attempt to 
distinguish claim 1 from the teachings of the Stefik reference based on the absence of 
the specific term "paged subset" in Stefik fails since this term is not found in the 
Applicant's claim 1. 

The Applicant attempts to distinguish claim 1 from the teachings of the Stefik 
reference by arguing, in effect, that claim 1 contains a limitation of allowing access to 
paged subsets of data using a single instance of permission. The Examiner counters by 
noting again that no such limitation is found in clam 1, and additionally offers Stefik col. 
12 lines 4-7 where this feature is taught. 

In response to applicant's argument that Comerford et al. US Patent 5,109,413 
Apr. 28, 1992 is nonanalogous art, it has been held that a prior art reference must either 
be in the field of applicant's endeavor or, if not, then be reasonably pertinent to the 
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particular problem with which the applicant was concerned, in order to be relied upon as 
a basis for rejection of the claimed invention. See In re Oetiker, 977 F.2d 1443, 24 
USPQ2d 1443 (Fed. Cir. 1992). In this case, the field of invention is distribution of 
access to a data item, as stated in the Applicants specification on page 1 of the 
specification. The Comerford '413 Patent teaches a method of distributing rights to 
utilize (access) encrypted software and hence is in the same field as the Applicants 
endeavor. 

The Applicant argues that the Comerford and Stefik references are not properly 
combinable since incorporation of the feature of Stefik of access to a paged subset of 
data at a time would require alteration of a fundamental principle of Comerford since the 
right to execute a software application in Comerford is separate from a digital work while 
Stefik requires that the digital rights not be separated. The Examiner counters by noting 
that both Comerford and Stefik require usage rights be sent to evaluated by a processor 
prior to usage rights being granted and therefore Stefik would not require an alteration 
of a fundamental operating principle of Comerford. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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4. Claims 1-6 and 8-39 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Comerford et al (US 5109413) in view of Stefik et al (US 5629980). 

Claim 1: the claimed invention teaches transferring a single instance of 
permission to gain access to a data item from a first computer to a second computer 
and subsequently from the second computer to a third computer such that only the 
computer in possession of the permission can gain access to the data item. 

Comerford et al (US 5109413) teaches a software asset protection mechanism 
that segregates software from a separate "right to execute" the software (see abstract). 
In Comerford et al (US 5109413), the right to execute is in the form of a decryption key 
called an application key AK (col. 1 , lines 43-46) where the right to execute may be 
transferred from one user to another (col. 4, lines 40-50) such that the method of 
transferring a right to execute in Comerford et al (US 5109413) inherently allows the 
right to execute to be transferred from a first user's computer to a second user's 
computer then transferred again from the second user's computer to a third user's 
computer. 

Since the right to execute is erased from a user's computer once it is transferred 
to a different user's computer (col. 7, lines 30-37 and col. 6, lines 5-9), only one user at 
a time can use a right to execute to access an encrypted application (col. 3, lines 25- 
30). 

The method disclosed in Comerford et al (US 5109413) differs from the claimed 
invention since the right to execute in Comerford et al (US 5109413) permits a user to 
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access software , whereas the permission in the claimed invention permits a user to 
access a data item . 

Firstly, the examiner believes one of ordinary skill would understand the software 
taught in Comerford et al (US 5109413) is digital data, composed of binary information 
(i.e., ones and zeros), and consequently falls within the scope of a general "data item." 

Furthermore, it would have been obvious to one of ordinary skill in the art at the 
time of the invention to use the right to execute taught in Comerford et al (US 5109413) 
even in conjunction with non-executable digital data since it was well known in the art at 
the time of the inventions to distribute encrypted digital works, such as those in Stefik et 
al (US 5629980) (see abstract, col. 1, lines 60-67, and col. 9, lines 47-49), where the 
digital works would require a user to have a decryption key, such as the right to execute 
in Comerford et al (US 5109413), to gain access to the digital work. 

One would be motivated to transfer non-executable digital works with a right to 
execute, as well as executable software, since electronic publishing companies at the 
time of the invention sold digital multimedia as well as software applications to make 
money (i.e., col. 1, lines 10-24 in Stefik et al (US 5629980)). 

Stefik teaches allowing access to a piece of encrypted data, the encrypted data 
item having paged subsets that are accessible a paged subset at a time using the same 
instance of permission for each paged subset in col. 3 lines 13-29, col. 1 1 lines 30-67 
and col. 12 lines 1-39. Therefore it would have been obvious to one of ordinary skill in 
the art at the time of the invention to incorporate this feature into the system of 
Comerford. It would have been desirable to do so as this would allow for greater 
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consumer selection in purchasing digital media content and greater vendor control over 
the use of digital media content and thereby increase the marketability of the system. 

Claims 2-3: the combined method of Comerford et al (US 5109413) and Stefik et 
al (US 5629980) described in regards to claim 1 uses a decryption key AK. 

Claim 4: the right to execute permission in the combined method of Comerford et 
al (US 5109413) and Stefik et al (US 5629980), decryption key AK, may be encrypted 
using a hardware vendor's key CSK (col. 5, lines 60-61 and col. 13, line 54 in 
Comerford et al (US 5109413)). 

Claim 5: in the combined method of Comerford et al (US 5109413) and Stefik et 
al (US 5629980), a hardware vendor key CSK may be used to encrypt a right to execute 
AK, where column 14, line 1 1 in Comerford et al (US 5109413) teaches the CSK may 
be a DES encryption key. 

However, it was known in the art at the time of the inventions that public/private key 
pairs, such as industry standard RSA encryption keys used in SSL and PGP, were also 
available for cryptographic systems resistant to cryptanalytic attacks (see col. 27, lines 1-9 and 
col. 27, lines 20-23 in Stefik et al (US 5629980) or any basic cryptography text that was known 
in the art at the time of the invention, such as the Schneier reference cited at the end of this 
Office action). 

Since the CSK in the combined method of Comerford et al (US 5109413) and 
Stefik et al (US 5629980) is explicitly taught to be chosen for use in a cryptographic 
system resistant to plain text attacks (col. 14, lines 10-12 in Comerford et al (US 
5109413)), clearly one of ordinary skill in the art would have found it obvious to choose 
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the CSK as a public/private key as an alternative to a symmetric DES key since both 
were known in the art of cryptography as being resistant to cryptographic attacks. 

Claim 6: in the combined method of Comerford et al (US 5109413) and Stefik et 
al (US 5629980), only the host computer (reference number 10 in Fig. 1 of Comerford et 
al (US 5109413)) having the right to execute AK stored in its memory (i.e., see col. 1, 
lines 46-50 and reference number 20 in Fig. 1) can gain access to received encrypted 
data (E A K(Application File) in Fig. 1). 

Since the right to execute is erased from a user's computer once it is transferred to a 
different user's computer (col. 7, lines 30-37 and col. 6, lines 5-9 in Comerford et al (US 
5109413)), only one user at a time can use a right to execute to access an encrypted 
application (col. 3, lines 25-30). 

Claim 8: a user's computer (reference number 10 in Fig. 1 of Comerford et al 
(US 5109413)) in the combined method of Comerford et al (US 5109413) and Stefik et 
al (US 5629980) inherently must comprise a de-encryptor that utilizes the right to 
execute, decryption key AK, so the user can gain access to a received digital work. 

Claims 9-10: a host computer (reference number 10 in Fig. 1 ) having a secure 
link to a co-processor having temporary and permanent memory (col. 17, lines 35-44 
and reference number 20 in Fig. 1 of Comerford et al (US 5109413)) in the combined 
method of Comerford et al (US 5109413) and Stefik et al (US 5629980) stores the right 
to execute, decryption key AK, and uses AK to decrypt received digital works within the 
secure co-processor memory (col. 17, line 50 through col. 18, line 16 in Comerford et al 
(US 5109413)). 
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Claim 11: in the combined method of Comerford et al (US 5109413) and Stefik 
et al (US 5629980), a transfer of a right to execute from one co-processor to another is 
considered safe when the two co-processors involved are able to identify one another 
as "members of the same family" (col. 6, lines 23-32 in Comerford et al (US 5109413)). 
Therefore, a user's computer in the combined method of Comerford et al (US 5109413) 
and Stefik et al (US 5629980) determines whether another user's computer is 
authorized to receive a right to execute before transferring that right to execute. 

Claim 12: column 2, lines 23-38 in Comerford et al (US 5109413) disclose an 
expiration time rendering the transfer of a right to execute as temporary. 

Claim 13: column 19, lines 23-30 in Comerford et al (US 5109413) disclose 
deleting a right to execute, decryption key AK, at an expiration time after the right to 
execute has been transferred to the permanent memory of a user's computer. 

Claim 14: as previously discussed in regards to claim 1 , in the combined method 
of Comerford et al (US 5109413) and Stefik et al (US 5629980), the right to execute is 
erased from a user's computer once it is transferred to a different user's computer (col. 
7, lines 30-37 and col. 6, lines 5-9), so only one user at a time can use a right to 
execute to access an encrypted application (col. 3, lines 25-30). 

Claim 15: in the combined method of Comerford et al (US 5109413) and Stefik 
et al (US 5629980), digital works are transferred from one user's computer to another, 
and a separate "right to execute" is transferred as well. In the abstract of Stefik et al 
(US 5629980), it is clear that one user computer would be an "owner" who transfers the 
digital work and the associated right to execute to a "buyer." 
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Thus, for a transaction between an "owner" and a "buyer" as taught in Stefik et al (US 
5629980), it would have been obvious to one of ordinary skill in the art at the time of the 
invention to also include the transfer of funds in such an explicit commercial transaction as 
stated in column 3, lines 45-48 in Stefik et al (US 5629980). 

Claim 16: column 23, lines 52-55 in Comerford et al (US 5109413) disclose a 
user's computer may have a "collection of rights to execute represented by the software 
decryption keys AKi and AK 2 ." Therefore, a user's computer must be able distinguish 
between more than one right to execute to gain access to a specific digital work in the 
combined method of Comerford et al (US 5109413) and Stefik et al (US 5629980). 

Claim 17: in the combined method of Comerford et al (US 5109413) and Stefik 
et al (US 5629980), a first "owner" computer may operate in server mode before 
transferring a digital work to a second "buyer" computer (i.e., col. 4, lines 10-12 in Stefik 
et al (US 5629980)). Stefik et al (US 5629980) discloses distributing digital works over 
the Internet (col. 1 , lines 25-30), so it would have been obvious to one of ordinary skill in 
the art at the time of the invention to implement a computer running in "server mode" on 
the Internet as a Web server computer since the World Wide Web was known in the art 
to be a standard and ubiquitous means for communicating information over the Internet 
at the time of the invention. 

Claims 18-19: column 1, lines 17-19 in Stefik et al (US 5629980) disclose the 
digital works in the combined method of Comerford et al (US 5109413) and Stefik et al 
(US 5629980) include books, and column 4, lines 30-33 in Stefik et al (US 5629980) 
disclose including a rendering device for viewing a received digital work; thus, it is 
obvious that the rendering device would be a book viewing device when a user's 
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computer in the combined method of Comerford et al (US 5109413) and Stefik et al (US 
5629980) receives a digital work comprising book data. Furthermore, it would be 
obvious that a functional rendering device for a digital work comprising book data would 
inherently comprise a viewing screen and appropriate communications circuitry. 

Claims 20-24, 26-31, 33-38, and 40: the claimed inventions comprise the same 
limitations as previously rejected claims 1-19 and are rejected for the same reasons. 

Claims 25. 32, and 39: the claimed inventions essentially teach having a 
publisher computer distribute permission data to a number A of end-user computers 
where the publisher computer delegates a number B of those permission datum to a 
distributor computer who in turn delegates a number C of those permission datum to a 
retailer computer who delegates one of the A permission datum to an end-user's 
computer. 

The examiner believes such a publisher-distributor-retailer-end user commercial 
hierarchy was well-known in business at the time of the inventions and it would have 
been obvious to one of ordinary skill in the art at the time of the invention to have a 
publisher computer in the combined method of Comerford et al (US 5109413) and Stefik 
et al (US 5629980) having a collection of A rights to execute (i.e., see col. 23, lines 52- 
55 in Comerford et al (US 5109413)) such that the A rights to execute {AKi, AK 2 , ... 
AKa} would be delegated according to an industry-standard business hierarchy 
comprising at least one distributor and retailer as well as a plurality of end-user 
consumers. 
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One of ordinary skill in the art would have been motivated to distribute the rights 
to execute in such an industry-standard hierarchy since it is common in business to 
have an end-user purchase digital works from any number of sources including directly 
from a publisher or distributor or retailer. Therefore, since buyers in the combined 
method of Comerford et al (US 5109413) and Stefik et al (US 5629980) would seek 
digital works and their associated rights to execute from any number of different well- 
known commercial channels, each potential "owner" would have to possess a set of the 
requisite rights to execute (also see abstract in Stefik et al (US 5629980)). 

Stefik teaches allowing access to a piece of encrypted data the encrypted data 
item having paged subsets that are accessible a paged subset at a time using the same 
instance of permission for each paged subset in col. 3 lines 13-29, col. 1 1 lines 30-67 
and col. 12 lines 1-39. Therefore it would have been obvious to one of ordinary skill in 
the art at the time of the invention to have incorporated this feature into the system of 
Comerford. It would have been desirable to do so as this would allow for greater 
consumer selection in purchasing digital media content and greater vendor control over 
the use of digital media content and thereby increase the marketability of the system. 

5. Claim 7 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Comerford et al (US 5109413) in view of Stefik et al (US 5629980) as applied to claim 6 
above, and further in view of Richards et al (US 6230267). 

Claim 7: although the host computer, reference number 10 in Fig. 1 of 
Comerford et al (US 5109413), in the combined method of Comerford et al (US 
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5109413) and Stefik et al (US 5629980) is not disclosed to be a "smartcard computer," 
the examiner believes it would be obvious to one of ordinary skill in the art at the time of 
the invention to implement the host in Comerford et al (US 5109413) on a portable 
smartcard such as the IC card in Richards et al (US 6230267). 

In Figs. 1 and 2 in Richards et al (US 6230267), an IC card, which is known in 
the art to be a "smartcard" as recited in claim 7, receives application code and 
application data as part of an application unit (AU) and the IC card also receives a 
separate key transformation unit (KTU). The KTU comprises permission information 
relating to the encryption of the received AU which allows the IC card to decrypt the AU 
so the received application and data can be accessed by the IC card (col. 6, lines 53- 
60). 

Clearly, the IC card in Richards et al (US 6230267) is analogous to the host 
computer in the combined method of Comerford et al (US 5109413) and Stefik et al (US 
5629980) since both receive digital data and separate permission data used to access 
the received digital data. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to implement the host computer in the combined method of Comerford et al 
(US 5109413) and Stefik et al (US 5629980) using a portable IC card, as taught in 
Richards et al (US 6230267), since a portable IC card gives a user flexibility of 
accessing various types of stored software and multimedia irrespective of different types 
of terminals where the user may choose to use the card (see col. 1 , lines 28-34 in 
Richards et al (US 6230267)). 
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Conclusion 



6. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 . 1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

7. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paul E. Callahan whose telephone number is (703) 305- 
1336. The examiner can normally be reached on M-F from 9 to 5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Greg Morse, can be reached on (703) 308-4789. The fax phone number for 
the organization where this application or proceeding is assigned is: (703) 872-9306. 
Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is (703) 305-3900. 
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